Slack notifications for Fail2Ban
blog.coleturner.me
blog.coleturner.me
On this topic does anyone know if there is something simple that will tell you if a new IP address logs in or a new process is started?
I agree completely that these things should use open standards first, and possibly support closed/app specific protocols/Apis second, if said app doesn't support an open standard.
But that doesn't work for a lot of devs these days, because it's not an instant popularity contest winner
Surely just feed all logs into Splunk or Logstash or similar? Most monitoring systems have plugins to alert via Slack now.